[jboss-jira] [JBoss JIRA] Updated: (JBAS-7484) Require a SecurityManager Permission to access a CacheManager-managed Cache

Jason T. Greene (JIRA) jira-events at lists.jboss.org
Mon Jun 28 13:32:48 EDT 2010


     [ https://jira.jboss.org/browse/JBAS-7484?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason T. Greene updated JBAS-7484:
----------------------------------

    Fix Version/s: Unscheduled
                       (was: 7.0.0.M1)


> Require a SecurityManager Permission to access a CacheManager-managed Cache
> ---------------------------------------------------------------------------
>
>                 Key: JBAS-7484
>                 URL: https://jira.jboss.org/browse/JBAS-7484
>             Project: JBoss Application Server
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Clustering
>            Reporter: Brian Stansberry
>            Assignee: Brian Stansberry
>             Fix For: Unscheduled
>
>
> Right now JBC instances created via the CacheManager are accessible by any code that injects the CacheManager. If the CacheJmxWrapper is registered in JMX, the cache is also available to any code running in the VM (via the getCache() attribute).
> This needs to be locked down, otherwise code that has no business looking at cache content can access a cache.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the jboss-jira mailing list